6.3
Moyenne
CVE-2019-4224 IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection
Description
IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 159240.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PureApplication System 2.2 | 2.2.3.0 → 2.2.5.3 | Pas de correctif indiqué |
Autres CVE de PureApplication System
Les 5 CVE de PureApplication System →
CVE-2019-4241
IBM PureApplication System 2.2.3.0 through 2.2.5.3 could allow an authenticated user with local access to bypass…
8.4
Élevée
CVE-2019-4234
IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor
4.3
Moyenne
CVE-2019-4235
IBM PureApplication System 2.2.3.0 through 2.2.5.3 does not require that users should have strong passwords by…
5.9
Moyenne
CVE-2019-4225
IBM PureApplication System 2.2.3.0 through 2.2.5.3 stores potentially sensitive information in log files that could be…
4.4
Moyenne